This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json) Hash identifier: UM331OdDBAN3gxeXLIdwMlzP6UU1VAkeZ1msdoccotw= Subject key identifier: 86:69:96:47:AE:08:90:8F:BD:AA:00:1E:C9:FF:06:E2:57:D7:0A:38 Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Certificate serial: 019BF7D14C721A57C127F311FD035B45A039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft Manifest number: 1375 Signing time: Mon 26 Jan 2026 01:00:47 +0000 Manifest this update: Mon 26 Jan 2026 01:00:47 +0000 Manifest next update: Tue 27 Jan 2026 01:00:47 +0000 Files and hashes: 1: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: bhTYXkW6Tl6K3OE6x7VdYpgNu2IlXiQ9VVjGpMU1epc=) 2: uD5eUDrQgXD4j74OWplFHBQd_hs.roa (hash: 1h/Ex6tXdCvENtcBMUtZd+XOEB+wQCjfinmzLg0hRdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:4c:72:1a:57:c1:27:f3:11:fd:03:5b:45:a0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Validity Not Before: Jan 26 01:00:47 2026 GMT Not After : Jan 27 01:00:47 2026 GMT Subject: CN=86699647ae08908fbdaa001ec9ff06e257d70a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e5:7f:9c:5b:7e:d3:76:a1:d0:da:f5:26:09: a9:d5:16:9e:b0:94:f3:b2:f8:03:49:a2:07:76:ba: f4:11:e5:b2:7e:9f:df:37:97:cc:73:e0:29:6e:07: fa:ed:97:70:86:3c:b1:c5:35:b4:03:20:b1:44:3e: 7e:10:b0:51:8b:55:b4:48:48:f7:54:de:48:a7:ba: 7a:1b:f7:72:7f:5b:dd:0a:21:7a:e6:cf:e3:1f:ab: f4:ea:bd:9a:b7:c9:2b:bb:70:34:b0:ea:9f:77:de: 5f:ba:0e:37:0e:a9:1e:1c:ac:bf:f1:42:e0:4d:66: ca:57:fb:32:8a:a9:0b:c1:e8:a1:db:b4:29:4f:e1: 00:dd:1d:31:89:57:a3:b5:a9:f2:76:0d:c0:4f:b6: b3:8c:b9:58:31:43:3e:bd:1f:9b:e6:4b:08:65:c4: da:82:04:e4:f5:e4:c7:72:db:a2:db:32:c6:a3:f6: e8:c8:ed:ae:2a:c8:0f:39:2a:70:a9:d6:ca:eb:78: 23:aa:5f:67:92:0d:f6:1c:44:e1:56:ea:6f:f0:c5: 99:91:ca:6a:c4:08:86:da:70:ff:b8:2d:e9:35:00: 6a:bc:79:2f:cf:9c:21:22:95:c4:ab:b5:a5:18:bf: 03:5b:27:1a:7c:d5:0f:5f:e4:28:b5:7d:bb:f2:3c: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:69:96:47:AE:08:90:8F:BD:AA:00:1E:C9:FF:06:E2:57:D7:0A:38 X509v3 Authority Key Identifier: keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:93:6a:5d:c0:7f:a3:07:8a:ab:4d:a7:36:c0:91:b6:e7:f4: aa:b2:99:8a:c6:23:24:21:4a:61:a7:46:21:4f:da:bb:ec:e0: da:6d:de:f5:59:2f:36:9c:b0:40:a6:3d:b2:f3:00:2c:3d:3a: 08:22:62:fd:5c:62:4c:c4:b2:fd:cd:d6:8a:29:78:d1:a4:3e: 13:57:6c:ca:b3:17:53:61:da:bd:05:a7:66:4c:e9:cc:48:22: f3:99:3c:35:3c:9e:1f:a4:b6:48:96:30:a0:68:25:c9:07:50: 43:a3:80:a0:b4:3f:18:f3:ef:09:6c:5f:4d:13:e7:f1:87:97: 92:ae:c5:2e:46:e2:e7:d9:84:e2:82:eb:ff:e3:f0:17:09:ad: c5:b0:b8:cf:59:c0:22:49:56:ef:e7:4a:be:db:5e:1e:f8:d5: d4:b0:78:55:2b:1c:df:57:ee:48:b8:58:46:78:69:65:1c:3e: ee:b8:80:1d:4d:dc:79:3e:f7:62:aa:ee:06:31:53:d1:de:fb: 28:6a:5c:74:dd:4e:53:ab:8c:fe:20:9a:49:91:c1:bc:6c:52: 7d:a4:1b:b0:5d:a6:8c:e7:56:9a:b4:14:82:d2:c3:e2:82:a7: b6:30:b8:ca:3c:8e:aa:6b:4c:36:90:57:ca:80:a7:b3:6f:cf: 5b:24:0d:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30UxyGlfBJ/MR/QNbRaA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Mjk1OTEzYzA3YzIyNjEwMGJkMzlmMWVlMmM1MmVhOThh YWVlMTQwHhcNMjYwMTI2MDEwMDQ3WhcNMjYwMTI3MDEwMDQ3WjAzMTEwLwYDVQQD Eyg4NjY5OTY0N2FlMDg5MDhmYmRhYTAwMWVjOWZmMDZlMjU3ZDcwYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eV/nFt+03ah0Nr1Jgmp1RaesJTz svgDSaIHdrr0EeWyfp/fN5fMc+Apbgf67ZdwhjyxxTW0AyCxRD5+ELBRi1W0SEj3 VN5Ip7p6G/dyf1vdCiF65s/jH6v06r2at8kru3A0sOqfd95fug43DqkeHKy/8ULg TWbKV/syiqkLweih27QpT+EA3R0xiVejtanydg3AT7azjLlYMUM+vR+b5ksIZcTa ggTk9eTHctui2zLGo/boyO2uKsgPOSpwqdbK63gjql9nkg32HEThVupv8MWZkcpq xAiG2nD/uC3pNQBqvHkvz5whIpXEq7WlGL8DWycafNUPX+QotX278jzblwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZplkeuCJCPvaoAHsn/BuJX1wo4MB8GA1UdIwQY MBaAFGUpWRPAfCJhAL058e4sUuqYqu4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYt NjQyMzZmYzM2ZDFkLzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYtNjQyMzZmYzM2ZDFk LzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpNqXcB/ oweKq02nNsCRtuf0qrKZisYjJCFKYadGIU/au+zg2m3e9VkvNpywQKY9svMALD06 CCJi/VxiTMSy/c3Wiil40aQ+E1dsyrMXU2HavQWnZkzpzEgi85k8NTyeH6S2SJYw oGglyQdQQ6OAoLQ/GPPvCWxfTRPn8YeXkq7FLkbi59mE4oLr/+PwFwmtxbC4z1nA IklW7+dKvtteHvjV1LB4VSsc31fuSLhYRnhpZRw+7riAHU3ceT73YqruBjFT0d77 KGpcdN1OU6uM/iCaSZHBvGxSfaQbsF2mjOdWmrQUgtLD4oKntjC4yjyOqmtMNpBX yoCns2/PWyQN5w== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:07 2026 by rpki-client